$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: lX2CvPUHc7HqNAllbu4iYtnq2yfZ86j337O1GKsBCDY= Subject key identifier: 8D:F0:3E:6A:A0:3B:9A:35:C7:B2:C9:71:52:6B:CD:33:32:F7:15:A8 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 037E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 0378 Signing time: Sat 23 Nov 2024 00:27:27 +0000 Manifest this update: Sat 23 Nov 2024 00:27:26 +0000 Manifest next update: Sat 30 Nov 2024 00:27:26 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: O7pimA9+VYzkPzei5L4ewilmMtEemD1hkWgCJ7z3B6A=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: u1WeU6UvrDy6/RJHPgJAeQ1takFO569N+KLvPiXwEw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: Nov 23 00:27:26 2024 GMT Not After : Nov 30 00:27:26 2024 GMT Subject: CN=6741216f-53b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:f0:21:76:69:5e:46:58:05:db:41:1a:5c: 18:fe:19:9d:1b:f5:07:45:a5:08:b3:1a:2f:55:db: a6:ff:f4:c3:ec:98:87:e2:da:1f:61:cb:f8:3e:73: b5:50:35:d8:0d:30:ee:a5:83:b6:d2:d7:39:a8:d4: 1e:2b:49:2c:4a:34:e7:ef:68:2e:83:c1:40:0c:3a: bf:af:5b:7a:e1:ad:52:21:2d:08:f1:01:b8:9b:ff: 2a:a9:2d:29:5f:b8:fc:85:74:d9:04:a3:81:3d:27: d3:89:d5:55:8a:e9:62:14:99:d9:50:7b:73:2c:53: f4:52:c4:78:27:cf:59:96:b6:8b:31:59:89:f3:ba: 75:b9:ad:f9:e3:86:50:9d:7c:95:8f:27:f4:7f:12: c3:e6:7d:0d:08:97:f5:88:5d:3c:76:0a:64:09:78: 1a:bc:3e:d6:ec:41:b3:d0:fb:8c:5b:67:8f:b4:df: c5:99:21:96:47:e9:8d:0d:80:18:18:e7:25:c1:aa: 06:64:2a:9a:77:d3:1e:aa:e8:56:8c:2f:7f:e6:71: fa:6c:62:68:89:0e:c1:2b:f9:02:7f:7e:21:c4:86: 6d:97:91:16:ae:1e:6e:ef:86:51:49:7b:68:3c:13: 07:56:68:5a:68:c0:36:07:71:29:f7:06:7b:11:b2: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F0:3E:6A:A0:3B:9A:35:C7:B2:C9:71:52:6B:CD:33:32:F7:15:A8 X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:22:73:29:2b:ab:a7:26:3a:0e:a1:15:98:f4:76:4c:ac:cc: 63:3e:12:8b:9b:f5:46:37:d0:21:35:af:6c:9f:59:16:91:c0: 8d:53:86:d6:bb:9a:93:40:30:35:33:6b:4b:2d:29:93:0e:28: 5a:4a:74:3b:99:d0:04:bf:77:bd:d1:b2:d7:f0:5d:52:86:6b: fb:17:e2:ef:0a:56:07:6a:95:32:f0:3a:98:6d:a7:1d:b4:94: 68:3d:c2:2e:fd:3a:37:14:5d:95:75:ed:d9:5e:db:a7:f0:4a: 30:dc:b3:9c:85:f6:c4:33:a2:23:d5:04:3d:87:3d:ae:bf:aa: ff:7b:62:f5:53:b6:e3:8c:4b:a4:e1:9d:3a:ec:a2:52:6c:19: fa:bc:af:28:06:7c:98:5e:9d:93:15:cd:c4:f2:38:94:1e:70: 0f:09:39:8f:56:d1:4c:0c:e5:d9:56:25:9a:fe:5d:2e:ae:99: e3:d1:a8:79:4e:f3:ea:a7:5d:e3:17:05:ba:7e:8d:ce:79:3b: e9:af:3a:3b:93:ca:ee:a4:bd:1a:02:0c:7c:e2:f5:2d:8a:21: 5d:0d:e3:75:b6:54:ed:9f:cd:7e:bb:f9:a8:19:1c:4d:02:d0: c5:68:b1:5f:53:db:c7:a9:5e:d0:bc:38:eb:ba:97:a3:36:34: e8:d7:c3:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjQxMTIzMDAyNzI2WhcNMjQxMTMwMDAyNzI2WjAYMRYwFAYD VQQDEw02NzQxMjE2Zi01M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZbwIXZpXkZYBdtBGlwY/hmdG/UHRaUIsxovVdum//TD7JiH4tofYcv4PnO1 UDXYDTDupYO20tc5qNQeK0ksSjTn72gug8FADDq/r1t64a1SIS0I8QG4m/8qqS0p X7j8hXTZBKOBPSfTidVViuliFJnZUHtzLFP0UsR4J89ZlraLMVmJ87p1ua3544ZQ nXyVjyf0fxLD5n0NCJf1iF08dgpkCXgavD7W7EGz0PuMW2ePtN/FmSGWR+mNDYAY GOclwaoGZCqad9MequhWjC9/5nH6bGJoiQ7BK/kCf34hxIZtl5EWrh5u74ZRSXto PBMHVmhaaMA2B3Ep9wZ7EbL2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3wPmqg O5o1x7LJcVJrzTMy9xWoMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIInMpK6unJjoOoRWY9HZMrMxjPhKLm/VGN9AhNa9sn1kWkcCNU4bW u5qTQDA1M2tLLSmTDihaSnQ7mdAEv3e90bLX8F1Shmv7F+LvClYHapUy8DqYbacd tJRoPcIu/To3FF2Vde3ZXtun8Eow3LOchfbEM6Ij1QQ9hz2uv6r/e2L1U7bjjEuk 4Z067KJSbBn6vK8oBnyYXp2TFc3E8jiUHnAPCTmPVtFMDOXZViWa/l0urpnj0ah5 TvPqp13jFwW6fo3OeTvprzo7k8rupL0aAgx84vUtiiFdDeN1tlTtn81+u/moGRxN AtDFaLFfU9vHqV7QvDjrupejNjTo18Mj -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org